last executing test programs: 29.410338838s ago: executing program 3 (id=336): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 28.554849967s ago: executing program 3 (id=338): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0x10000, 0xc}, {0x10000002, 0x0, 0x0, 0x8}], 0x10, 0x2000}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, 0x0, 0x0, 0x0, 0xfffffe00}, 0x0) sendmsg$kcm(r2, &(0x7f0000000dc0)={&(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000580)="796bb33fe69a03cb72a681b59a122932be45e16f567d8d6de272eb1daebfb05e9fd2e0b0918728048fdb9a17cb0ef3fd8198f26348ea8cfea725d2da1a3c3db720efea962549536d1b82a6b3cfad7d31a15b3b71c74193e9d2152aa25460b0a6ff13b8d20b7930d0a40912941e1f94f1ec13965f037b15eba6f956fe575a267811814145605434998c7946830d62b66e63a42909fdb31b283a0dea9d9c7ace2ade1c3cd5eb32e1f9a1", 0xa9}, {0x0}, {&(0x7f0000000f00)}, {&(0x7f0000000900)="d1ceedb6ab500b7b38a86141a62e26802cd5290355a92d687fda3ec2b84a5e5a30f2c222f83e6cdf8e54c4a36084e96c4091c59753f3591c57581e59981b33d60b6cf9d5b3fccf7cd94249fb317a189a5998ce129bce9af1b1b6e4f27fd552302d443a818fdd779e81ba1af953aac5a44b8985c803604984b4", 0x79}, {&(0x7f0000000b00)="698cd018fea59a5db65d167428ebb76ce215a70532f987c697c88de5c2c5dd698b389d6bb7fa509ec2760f1624b4df170511cfe1c914b20d7a88bbd3f7564f8ee60065056f9a5d447a6a9cbf1e79164beceb53e6f8179b8c88fa8e80db58f56df35c1daec86a1a3b4d0bad139a06868a408116510a0cb77d4d625d3474f9c53180baa60dc6d2f0fd2aa10c83d1bd394cb7d64acbb91fee6edd8f49c8fd90ad404e0496e2e92fbc2334708c4bb71270be42b73022adcf1ae9e43f2bdd195e7f1a731ace59", 0xc4}, {&(0x7f0000000c00)="137194778a25eceb6d011c8ad04326bec05bc73b09", 0x15}, {&(0x7f00000009c0)="909e6dda45df42931603a99594d8bc4830e09bf6c826e0e0a44a82f41470e8c9477ccd271b6620a9cefc5fd62b3cf14ad5d6b9968b27cca2e6f2b0c41aedd1c0eee81a5a9cdf130b17e9363b56aedd94077bf6dc85f425a7b1c8142de341447ab1dbc24f564a398ecd0c3b634c", 0x6d}, {&(0x7f0000000100)="3ff821d5f1ff495ff5a11769e4bc4f9c922864e130d7a9709cca6e7fa134ee66822c03070c11415ac9ef048b0605fef3bf057fea76657f1278c78afc", 0x3c}], 0x8}, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0xf68}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) 27.545255939s ago: executing program 3 (id=343): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000006040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) 26.767229817s ago: executing program 1 (id=344): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x1, 0x0, 0xfd, 0xd, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x1d013, 0xc8, 0xffff, 0x9, 0xf5, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 26.554527431s ago: executing program 1 (id=347): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 25.828202397s ago: executing program 1 (id=353): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@raw=[@tail_call], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup, 0x11, 0x1, 0x9, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000c80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4a, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0x1a, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000f9ffffff00000000a100000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0xf, 0x1000, &(0x7f0000001400)=""/4096, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x5, 0x2, 0x3, 0x4bb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7dd4458f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex=r8, r3, 0x35, 0x2, r4, @void, @value=r9, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x41, 0x0, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x28, 0x11, 0x8, 0xfffff010}, {0x3, 0xac, 0xd, 0x1}]}) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 25.6706535s ago: executing program 1 (id=355): socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 24.760495121s ago: executing program 0 (id=361): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x1, 0x80, 0x0, 0x43, 0x9, 0xfc, 0x0, 0x9, 0x101, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2fdb, 0x0, @perf_config_ext={0xc00000, 0x97}, 0x900, 0x7, 0x9, 0x2, 0x8, 0x6, 0x4, 0x0, 0x4, 0x0, 0x9}) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000540)="b88a000000000000000000008100", 0xe}, {&(0x7f0000000740)="e1c388a8d50624ed", 0x8}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/73, 0x49}], 0x1, &(0x7f0000000240)=""/111, 0x6f}, 0x40002002) 24.718357772s ago: executing program 2 (id=362): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 24.631487044s ago: executing program 0 (id=363): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 24.505346536s ago: executing program 0 (id=364): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000001c00f0a118000a000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 24.382857359s ago: executing program 0 (id=365): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x5, &(0x7f00000000c0)=@raw=[@tail_call], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@cgroup, 0x11, 0x1, 0x9, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a00), &(0x7f0000000c80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001040)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB, @ANYRES32], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x87, &(0x7f0000000700)=[{}, {}], 0x10, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x4a, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0x1a, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000f9ffffff00000000a100000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000160085000000870000004d298000ffffffff85200000040000008d62f8ff10000000180000000000000000000000080000001812000061e5005ed8282ac591ea108531734a567c888a5b9d55b482b57149bbe70e76385db9b3127d65b1f67e96d238ac729d4d788821c31575f9bc2bd40211f28e2cd3a041a77835431a6334169c24010d955cef0f55001ab09a800c8c53ce7e42daed23cb7c6d38138843013ab1ec00008f132882e5ae073fd853f3c2e1afbe5d74233ad9db87d7acd2df88746b3080abcaab97665278d04bd1a1c4dc2ba01ba23d62f3d412fdd80da30390e46fb77071e07feb27fb145eb913a5de8da705e0bc6594072dcddcac9313a497735a8db8be81c3f8d7fed5fdab62307cdfa3aaebf4faac100f748373a22f60e479cc4a650bb346be6846469e18ea5e1db095491d66c645df96b7f1d9af70fac05c6852bed7aa554b41c429d690845cf5401ee70826f2be67b404adc783fe099d9f34c98aa3bd2013944feecf44a1cb154a9f4002e385c1dc07e69ed07e388f94c101f0232ef2dcb02d2bc3b36db072c1996468ed01b8c57a763627e49ff108344371f8654d0e99a6528e745ac08e", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0xf, 0x1000, &(0x7f0000001400)=""/4096, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x5, 0x2, 0x3, 0x4bb}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0x1], 0x0, 0x10, 0x7dd4458f}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex=r8, r3, 0x35, 0x2, r4, @void, @value=r9, @void, @void, r7}, 0x20) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) r10 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x0, 0x41, 0x0, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f00000002c0)=[{0x28, 0x11, 0x8, 0xfffff010}, {0x3, 0xac, 0xd, 0x1}]}) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r12, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 24.134452595s ago: executing program 3 (id=366): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0xe}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0xa, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x10, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000600)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000940), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={r7, &(0x7f0000000680)}, 0x20) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="27031c00160014000000002f1eafacf706e105000000894f00030001ee0b80558ddbba9b37242d29a50ed004484890af0755b798a0", 0x35}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x4) close(r9) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31086b876c1d0000007ea60864160af36504002b00060001004ce82bdface7b3d57581fff60a84c9f4d4938037e786a6d0001000000e4509c5bb5b64f69853000000029e79c7ad2600375b3f54", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x21, 0x2, 0xa) syz_clone(0x10001000, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) 24.075192246s ago: executing program 2 (id=367): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 23.8860613s ago: executing program 2 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x5, 0x2, 0x4}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ffec00850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0xc03e, 0x0, 0x0, 0x24048045}, 0x20000000) 23.758485903s ago: executing program 2 (id=369): r0 = socket$kcm(0x23, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x39) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@map_idx={0x18, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x23, 0x7, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r1}, 0x39) (async) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89ee, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@map_idx={0x18, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 23.556193278s ago: executing program 2 (id=370): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffffffff, 0x0, 0x10000, 0xc}, {0x10000002, 0x0, 0x0, 0x8}], 0x10, 0x2000}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, 0x0, 0x0, 0x0, 0xfffffe00}, 0x0) sendmsg$kcm(r2, &(0x7f0000000dc0)={&(0x7f0000000280)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000580)="796bb33fe69a03cb72a681b59a122932be45e16f567d8d6de272eb1daebfb05e9fd2e0b0918728048fdb9a17cb0ef3fd8198f26348ea8cfea725d2da1a3c3db720efea962549536d1b82a6b3cfad7d31a15b3b71c74193e9d2152aa25460b0a6ff13b8d20b7930d0a40912941e1f94f1ec13965f037b15eba6f956fe575a267811814145605434998c7946830d62b66e63a42909fdb31b283a0dea9d9c7ace2ade1c3cd5eb32e1f9a1", 0xa9}, {0x0}, {&(0x7f0000000f00)}, {&(0x7f0000000900)="d1ceedb6ab500b7b38a86141a62e26802cd5290355a92d687fda3ec2b84a5e5a30f2c222f83e6cdf8e54c4a36084e96c4091c59753f3591c57581e59981b33d60b6cf9d5b3fccf7cd94249fb317a189a5998ce129bce9af1b1b6e4f27fd552302d443a818fdd779e81ba1af953aac5a44b8985c803604984b4", 0x79}, {&(0x7f0000000b00)="698cd018fea59a5db65d167428ebb76ce215a70532f987c697c88de5c2c5dd698b389d6bb7fa509ec2760f1624b4df170511cfe1c914b20d7a88bbd3f7564f8ee60065056f9a5d447a6a9cbf1e79164beceb53e6f8179b8c88fa8e80db58f56df35c1daec86a1a3b4d0bad139a06868a408116510a0cb77d4d625d3474f9c53180baa60dc6d2f0fd2aa10c83d1bd394cb7d64acbb91fee6edd8f49c8fd90ad404e0496e2e92fbc2334708c4bb71270be42b73022adcf1ae9e43f2bdd195e7f1a731ace59", 0xc4}, {&(0x7f0000000c00)="137194778a25eceb6d011c8ad04326bec05bc73b09", 0x15}, {&(0x7f00000009c0)="909e6dda45df42931603a99594d8bc4830e09bf6c826e0e0a44a82f41470e8c9477ccd271b6620a9cefc5fd62b3cf14ad5d6b9968b27cca2e6f2b0c41aedd1c0eee81a5a9cdf130b17e9363b56aedd94077bf6dc85f425a7b1c8142de341447ab1dbc24f564a398ecd0c3b634c", 0x6d}, {&(0x7f0000000100)="3ff821d5f1ff495ff5a11769e4bc4f9c922864e130d7a9709cca6e7fa134ee66822c03070c11415ac9ef048b0605fef3bf057fea76657f1278c78afc", 0x3c}], 0x8}, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x1000000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0xf68}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) 22.889995782s ago: executing program 0 (id=371): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x20, 0x32, 0x43a1bd74, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000980)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r4}, &(0x7f00000012c0), &(0x7f0000001300)=r2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 22.867477913s ago: executing program 3 (id=372): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext, 0x0, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xbb26fd1d8f38c5e2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000300)={0x0, 0x80, 0xf8, 0x6, 0x6, 0x9, 0x0, 0x4, 0xa940, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0xea, 0xfffffffffffffffa}, 0x49c0, 0x448000000000, 0x4, 0x5, 0x7, 0xaa, 0x0, 0x0, 0x10000, 0x0, 0x1}) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="140000002d000b35f8ffffffffffffff0fa3096d", 0x14}], 0x1}, 0x854) close(r5) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fd, 0x0, @perf_config_ext, 0x0, 0x201, 0x0, 0x7, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a50000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) socket$kcm(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x22}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x0, 0x40}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xd, &(0x7f00000000c0)=""/13, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 22.832308354s ago: executing program 1 (id=373): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8400, 0x3, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x18, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a000000000095000000000000006dd49ce32174533466dea5d576455601e2fb1b5f31e4419a986250033107fbd0a73eb80c10a24968f8126dd26538975e8b2d8755d6dec5bb047740716c1457a324f349bc95093f3982cbb72b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 22.694332287s ago: executing program 0 (id=374): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) recvmsg$unix(r1, 0x0, 0x40002003) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x0, 0x34}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xbf, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x28, &(0x7f0000000340)=""/40, 0x40f00, 0x1, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x100, 0x5}, 0x10, 0x10aa1, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r1, r3, r4, r3, r3], &(0x7f0000000540)=[{0x3, 0x1, 0xb, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa07, 0xfffffffffffffff9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44800) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001f00)=[{0x0}], 0x1}, 0x22) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 22.671004307s ago: executing program 1 (id=375): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 22.404272253s ago: executing program 3 (id=376): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 15.238958912s ago: executing program 2 (id=377): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4090, 0x0, 0x0, 0x8, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r1}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffe4a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0xfffffffffffffe89}], 0x1}, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0400"], 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000015c0)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001500)}], 0x1, 0x0, 0x0, 0xc4}, 0x8050) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x408580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x20002, 0x8, 0x0, 0x3, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x4) ioctl$TUNSETQUEUE(r7, 0x400454d9, 0x0) r9 = openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x9) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) 7.040568224s ago: executing program 32 (id=374): close(0xffffffffffffffff) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) recvmsg$unix(r1, 0x0, 0x40002003) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x0, 0x34}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xbf, &(0x7f0000000200), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x16, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x28, &(0x7f0000000340)=""/40, 0x40f00, 0x1, '\x00', r5, 0x19, r2, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xc, 0x100, 0x5}, 0x10, 0x10aa1, 0xffffffffffffffff, 0x1, &(0x7f0000000440)=[r1, r3, r4, r3, r3], &(0x7f0000000540)=[{0x3, 0x1, 0xb, 0x7}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa07, 0xfffffffffffffff9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44800) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001f00)=[{0x0}], 0x1}, 0x22) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 6.971703785s ago: executing program 33 (id=375): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x2}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x5}, @func_proto, @func_proto, @fwd={0x8}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x2e, 0x30, 0x5f, 0x2e]}}, 0x0, 0x66, 0x0, 0x1, 0x7}, 0x28) r2 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r2, &(0x7f0000000200)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x3, @private2, 0xfffffffd}, 0x80, 0x0}, 0x8010) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="7a0af8ff7525732cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000f700000000b2595285fa97ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5956fc4a33ca263e2b5d47b2b00000000b1a297cfddd73f30f2382f6c2d3ffdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000010000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e3841bef895c5a637b0bf2eac3cb07b74a72291a1a2b523dd81b6651b1ee29e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c92cdfbea882b0b18914781ceb10814cf4ee23ddb79fff5eb156e0a000000000000f2bd164a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8fdf3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c980000cfb215af2c1a3c22243cce23b00000a857d61b0d66c3f6da8aed31027c33204ea0fa0620111920d3f24980e9995a510bd87b06440a0a26130098b901c53a02cfbfd8bcbdec9f34542c3c9652adefde555ecd28ebc88082bab431ee3e1adb5b0ad14c79dd4411ecc96c512f3b72a9b3a0c3e07ec6b427bdc0bf3963e9f802a5feab82a989db62d8d1339f842b3f593d6c24fe015ec63c658ba7c4fae17514f802709ab4fa5caa932d4b65a5ecfc422899513ddde6ec04974f9981a8c155c26e0da70e524832ab04dec9ce66a62ceffbb15b1857c93666fe043a266a451f9a1e1f054211b9ae566b58f4f356c7a4054ce13f6fcc58912a175bd9cc3c494894ad39b36e34e608f4ac00cf22c27bb8c12bcf4beeb579fc9fa1c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 6.857403828s ago: executing program 34 (id=376): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fec0000000000000080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x400c044) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x66, 0xc, 0x0, 0x0, 0x0, 0x9, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x20000003, 0x43a1bd76, 0x7, 0x6, 0x658, 0x8, 0x0, 0x0, 0x0, 0x400000000200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x404c000) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1802000000000000000000000100000085000000300000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r10, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 35 (id=377): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4090, 0x0, 0x0, 0x8, 0x7, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x1b) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000f80)={0x0, 0xfffffffffffffffd, &(0x7f0000000e00), &(0x7f0000000e80), 0x4, r1}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0xfffffffffffffe4a) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0xfffffffffffffe89}], 0x1}, 0xc0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0400"], 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000015c0)={&(0x7f0000000240)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001500)}], 0x1, 0x0, 0x0, 0xc4}, 0x8050) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x408580, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x20002, 0x8, 0x0, 0x3, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0xbaff3e50736035b6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="240000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e3", 0x24}], 0x1, 0x0, 0x0, 0xc9e}, 0x4) ioctl$TUNSETQUEUE(r7, 0x400454d9, 0x0) r9 = openat$cgroup_type(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x9) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x541b, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 71.908892][ T5762] cgroup: Unknown subsys name 'net' [ 72.038384][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.423707][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.839808][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.844617][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.855789][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.863877][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.871868][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.881054][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.885597][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.891948][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.897142][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.910319][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.917779][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.925742][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.931233][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.934453][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.941570][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.955497][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.956862][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.962720][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.970470][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.976895][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.984411][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.013528][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.029418][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.036841][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.438220][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 75.498709][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 75.509908][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 75.566273][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 75.648357][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.655614][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.663124][ T5775] bridge_slave_0: entered allmulticast mode [ 75.670346][ T5775] bridge_slave_0: entered promiscuous mode [ 75.710047][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.717297][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.724774][ T5775] bridge_slave_1: entered allmulticast mode [ 75.731455][ T5775] bridge_slave_1: entered promiscuous mode [ 75.753700][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.760804][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.768042][ T5774] bridge_slave_0: entered allmulticast mode [ 75.775181][ T5774] bridge_slave_0: entered promiscuous mode [ 75.800887][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.808241][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.815558][ T5777] bridge_slave_0: entered allmulticast mode [ 75.822801][ T5777] bridge_slave_0: entered promiscuous mode [ 75.834919][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.842180][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.849339][ T5774] bridge_slave_1: entered allmulticast mode [ 75.858430][ T5774] bridge_slave_1: entered promiscuous mode [ 75.875944][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.883170][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.890285][ T5777] bridge_slave_1: entered allmulticast mode [ 75.897182][ T5777] bridge_slave_1: entered promiscuous mode [ 75.918942][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.967682][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.994207][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.001384][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.008767][ T5776] bridge_slave_0: entered allmulticast mode [ 76.015447][ T5776] bridge_slave_0: entered promiscuous mode [ 76.026294][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.037818][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.050779][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.068937][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.076378][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.083822][ T5776] bridge_slave_1: entered allmulticast mode [ 76.090495][ T5776] bridge_slave_1: entered promiscuous mode [ 76.098876][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.119154][ T5775] team0: Port device team_slave_0 added [ 76.156745][ T5774] team0: Port device team_slave_0 added [ 76.164322][ T5775] team0: Port device team_slave_1 added [ 76.172316][ T5774] team0: Port device team_slave_1 added [ 76.216053][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.230064][ T5777] team0: Port device team_slave_0 added [ 76.248899][ T5777] team0: Port device team_slave_1 added [ 76.264749][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.271836][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.297928][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.311390][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.331782][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.338734][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.365316][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.378187][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.385347][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.411352][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.432258][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.439214][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.465259][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.528325][ T5776] team0: Port device team_slave_0 added [ 76.537039][ T5776] team0: Port device team_slave_1 added [ 76.543860][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.550811][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.577594][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.599176][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.606316][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.637510][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.668324][ T5775] hsr_slave_0: entered promiscuous mode [ 76.675252][ T5775] hsr_slave_1: entered promiscuous mode [ 76.718044][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.725103][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.751090][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.771318][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.778328][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.804870][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.854058][ T5774] hsr_slave_0: entered promiscuous mode [ 76.860416][ T5774] hsr_slave_1: entered promiscuous mode [ 76.867220][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.875165][ T5774] Cannot create hsr debugfs directory [ 76.908184][ T5777] hsr_slave_0: entered promiscuous mode [ 76.914555][ T5777] hsr_slave_1: entered promiscuous mode [ 76.920576][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.928230][ T5777] Cannot create hsr debugfs directory [ 76.978511][ T5776] hsr_slave_0: entered promiscuous mode [ 76.986002][ T5776] hsr_slave_1: entered promiscuous mode [ 76.992901][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.000454][ T5776] Cannot create hsr debugfs directory [ 77.082353][ T5783] Bluetooth: hci0: command tx timeout [ 77.087947][ T5783] Bluetooth: hci1: command tx timeout [ 77.093974][ T5788] Bluetooth: hci2: command tx timeout [ 77.099551][ T5788] Bluetooth: hci3: command tx timeout [ 77.358293][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.369646][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.380750][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.390628][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.446884][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.468655][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.479305][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.507884][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.582732][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.609513][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.620408][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.664394][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.676077][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.689034][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.711867][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.729170][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.738976][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.795002][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.827904][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.835308][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.857329][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.864498][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.950471][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.996791][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.009223][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.046504][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.053673][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.079562][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.086746][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.104921][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.118424][ T4131] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.125606][ T4131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.154756][ T4131] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.161934][ T4131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.180066][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.204787][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.248093][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.255391][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.279947][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.287119][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.343641][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.577778][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.705044][ T5775] veth0_vlan: entered promiscuous mode [ 78.738780][ T5775] veth1_vlan: entered promiscuous mode [ 78.813526][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.855542][ T5775] veth0_macvtap: entered promiscuous mode [ 78.890954][ T5775] veth1_macvtap: entered promiscuous mode [ 78.908940][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.925708][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.959586][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.009049][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.027153][ T5777] veth0_vlan: entered promiscuous mode [ 79.047974][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.058915][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.067720][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.076577][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.097935][ T5774] veth0_vlan: entered promiscuous mode [ 79.115829][ T5777] veth1_vlan: entered promiscuous mode [ 79.138832][ T5776] veth0_vlan: entered promiscuous mode [ 79.155410][ T5774] veth1_vlan: entered promiscuous mode [ 79.162223][ T5788] Bluetooth: hci3: command tx timeout [ 79.167705][ T5779] Bluetooth: hci2: command tx timeout [ 79.173888][ T5083] Bluetooth: hci0: command tx timeout [ 79.179388][ T5783] Bluetooth: hci1: command tx timeout [ 79.205748][ T5776] veth1_vlan: entered promiscuous mode [ 79.246545][ T5777] veth0_macvtap: entered promiscuous mode [ 79.316878][ T5777] veth1_macvtap: entered promiscuous mode [ 79.340438][ T5776] veth0_macvtap: entered promiscuous mode [ 79.353942][ T5774] veth0_macvtap: entered promiscuous mode [ 79.373056][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.381954][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.415273][ T5774] veth1_macvtap: entered promiscuous mode [ 79.426118][ T5776] veth1_macvtap: entered promiscuous mode [ 79.438064][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.449253][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.462343][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.484361][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.495067][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.505012][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.515954][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.527516][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.541396][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.552405][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.552714][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.564339][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.581467][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.586975][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.596860][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.610059][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.620951][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.633380][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.644853][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.655965][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.666941][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.677780][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.687732][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.698317][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.709242][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.724283][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.741825][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.750565][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.759805][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.773259][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.784302][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.795352][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.807144][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.817487][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.827948][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.839287][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.850154][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.861563][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.871777][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.880491][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.908808][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.924976][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.935206][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.945171][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.149358][ T4843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.177686][ T4843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.217366][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.229438][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.301534][ C1] hrtimer: interrupt took 46914 ns [ 80.308800][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.321784][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.343449][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.351281][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.430074][ T4344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.443291][ T4344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.503280][ T2879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.517232][ T2879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.244089][ T5783] Bluetooth: hci1: command tx timeout [ 81.244129][ T5788] Bluetooth: hci2: command tx timeout [ 81.249501][ T5779] Bluetooth: hci0: command tx timeout [ 81.256474][ T5788] Bluetooth: hci3: command tx timeout [ 82.640612][ T5847] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.723967][ T5853] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5'. [ 82.785189][ T5852] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4'. [ 82.908171][ T5857] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 82.931709][ T5857] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.6'. [ 82.973624][ T5857] openvswitch: netlink: Flow key attr not present in new flow. [ 83.326415][ T5857] syzkaller0: entered promiscuous mode [ 83.330626][ T5788] Bluetooth: hci0: command tx timeout [ 83.337641][ T5788] Bluetooth: hci1: command tx timeout [ 83.340364][ T5779] Bluetooth: hci2: command tx timeout [ 83.345310][ T5788] Bluetooth: hci3: command tx timeout [ 83.362270][ T5857] syzkaller0: entered allmulticast mode [ 84.875534][ T5865] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9'. [ 84.886338][ T5868] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10'. [ 84.895545][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.147013][ T5876] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 85.163571][ T5876] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.13'. [ 85.183505][ T5876] openvswitch: netlink: Flow key attr not present in new flow. [ 85.312566][ T5880] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.15'. [ 86.959382][ T23] cfg80211: failed to load regulatory.db [ 86.978242][ T5876] syzkaller0: entered promiscuous mode [ 86.985560][ T5876] syzkaller0: entered allmulticast mode [ 88.702304][ T5898] warning: `syz.2.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.925344][ T5903] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20'. [ 89.006167][ T5906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.21'. [ 89.160149][ T5909] netlink: 48 bytes leftover after parsing attributes in process `syz.2.23'. [ 89.226837][ T5911] netlink: 48 bytes leftover after parsing attributes in process `syz.0.24'. [ 89.314974][ T5913] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.25'. [ 89.990106][ T5920] syzkaller0: entered promiscuous mode [ 90.031937][ T5920] syzkaller0: entered allmulticast mode [ 90.575405][ T5788] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 91.576291][ T5929] netlink: 48 bytes leftover after parsing attributes in process `syz.3.31'. [ 91.772497][ T5943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.36'. [ 92.041042][ T5949] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.37'. [ 92.055288][ T5947] syzkaller0: entered promiscuous mode [ 92.055323][ T5947] syzkaller0: entered allmulticast mode [ 92.476065][ T5956] netlink: 'syz.3.48': attribute type 10 has an invalid length. [ 92.491945][ T5956] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.48'. [ 92.539349][ T5956] openvswitch: netlink: Flow key attr not present in new flow. [ 93.731214][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.2.39'. [ 94.173505][ T5968] syz.0.41 (5968) used greatest stack depth: 20712 bytes left [ 94.277486][ T5788] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 94.549201][ T5978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.47'. [ 94.838982][ T5984] syzkaller0: entered promiscuous mode [ 94.845141][ T5984] syzkaller0: entered allmulticast mode [ 94.866733][ T5982] netlink: 48 bytes leftover after parsing attributes in process `syz.1.51'. [ 96.050965][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 96.992677][ T5788] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 97.000316][ T5788] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 97.291124][ T6042] netlink: 48 bytes leftover after parsing attributes in process `syz.3.76'. [ 97.337695][ T6046] netlink: 'syz.1.84': attribute type 10 has an invalid length. [ 97.354876][ T6046] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.84'. [ 97.377235][ T6046] openvswitch: netlink: Flow key attr not present in new flow. [ 98.449708][ T6069] FAULT_INJECTION: forcing a failure. [ 98.449708][ T6069] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 98.482106][ T6069] CPU: 1 PID: 6069 Comm: syz.2.85 Not tainted syzkaller #0 [ 98.489376][ T6069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 98.499473][ T6069] Call Trace: [ 98.502756][ T6069] [ 98.505690][ T6069] dump_stack_lvl+0x18c/0x250 [ 98.510390][ T6069] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.516556][ T6069] ? show_regs_print_info+0x20/0x20 [ 98.521761][ T6069] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.527944][ T6069] should_fail_ex+0x394/0x4c0 [ 98.532632][ T6069] _copy_to_user+0x2f/0xa0 [ 98.537048][ T6069] bpf_test_finish+0x4e7/0x650 [ 98.541823][ T6069] ? bpf_test_run+0x174/0x870 [ 98.546529][ T6069] ? convert_skb_to___skb+0x420/0x420 [ 98.551929][ T6069] ? slab_build_skb+0x25a/0x3e0 [ 98.556795][ T6069] bpf_prog_test_run_skb+0x1135/0x18f0 [ 98.562284][ T6069] ? cpu_online+0x60/0x60 [ 98.566635][ T6069] bpf_prog_test_run+0x31f/0x390 [ 98.571607][ T6069] __sys_bpf+0x49d/0x890 [ 98.575870][ T6069] ? bpf_link_show_fdinfo+0x390/0x390 [ 98.581383][ T6069] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 98.587596][ T6069] __x64_sys_bpf+0x7c/0x90 [ 98.592034][ T6069] do_syscall_64+0x55/0xb0 [ 98.596462][ T6069] ? clear_bhb_loop+0x40/0x90 [ 98.601144][ T6069] ? clear_bhb_loop+0x40/0x90 [ 98.605842][ T6069] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.611751][ T6069] RIP: 0033:0x7f5c1079de59 [ 98.616192][ T6069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.635802][ T6069] RSP: 002b:00007f5c11688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.644217][ T6069] RAX: ffffffffffffffda RBX: 00007f5c10a25fa0 RCX: 00007f5c1079de59 [ 98.652185][ T6069] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 98.660271][ T6069] RBP: 00007f5c11688090 R08: 0000000000000000 R09: 0000000000000000 [ 98.668301][ T6069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.676277][ T6069] R13: 00007f5c10a26038 R14: 00007f5c10a25fa0 R15: 00007fffd276e9f8 [ 98.684297][ T6069] [ 98.927006][ T6078] netlink: 'syz.0.89': attribute type 10 has an invalid length. [ 98.950744][ T6078] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.89'. [ 98.994582][ T6078] openvswitch: netlink: Flow key attr not present in new flow. [ 99.560283][ T6091] netlink: 'syz.0.94': attribute type 3 has an invalid length. [ 99.572367][ T6091] netlink: 132 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.415998][ T6109] netlink: 'syz.2.102': attribute type 10 has an invalid length. [ 100.449423][ T6109] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.102'. [ 100.481733][ T6109] openvswitch: netlink: Flow key attr not present in new flow. [ 101.474244][ T5788] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 101.486445][ T5788] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 101.754416][ T6131] FAULT_INJECTION: forcing a failure. [ 101.754416][ T6131] name failslab, interval 1, probability 0, space 0, times 1 [ 101.776398][ T6131] CPU: 1 PID: 6131 Comm: syz.2.110 Not tainted syzkaller #0 [ 101.783735][ T6131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 101.793818][ T6131] Call Trace: [ 101.797114][ T6131] [ 101.800055][ T6131] dump_stack_lvl+0x18c/0x250 [ 101.804756][ T6131] ? sctp_sendmsg+0x1519/0x27b0 [ 101.809628][ T6131] ? ___sys_sendmsg+0x2a6/0x360 [ 101.814510][ T6131] ? show_regs_print_info+0x20/0x20 [ 101.819737][ T6131] ? load_image+0x420/0x420 [ 101.824291][ T6131] should_fail_ex+0x394/0x4c0 [ 101.829004][ T6131] should_failslab+0x9/0x20 [ 101.833533][ T6131] slab_pre_alloc_hook+0x59/0x300 [ 101.838583][ T6131] ? sctp_add_bind_addr+0x8c/0x360 [ 101.843720][ T6131] __kmem_cache_alloc_node+0x53/0x250 [ 101.849123][ T6131] ? sctp_add_bind_addr+0x8c/0x360 [ 101.854261][ T6131] kmalloc_trace+0x2a/0xe0 [ 101.858706][ T6131] sctp_add_bind_addr+0x8c/0x360 [ 101.863669][ T6131] sctp_copy_local_addr_list+0x31b/0x4e0 [ 101.869322][ T6131] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 101.875059][ T6131] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 101.881146][ T6131] ? sctp_v4_is_any+0x35/0x60 [ 101.885837][ T6131] ? sctp_copy_one_addr+0x8c/0x350 [ 101.890968][ T6131] sctp_bind_addr_copy+0xb3/0x3c0 [ 101.896001][ T6131] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 101.902334][ T6131] sctp_connect_new_asoc+0x2f9/0x6a0 [ 101.907616][ T6131] ? __sctp_connect+0xd80/0xd80 [ 101.912457][ T6131] ? __local_bh_enable_ip+0x13a/0x1c0 [ 101.917830][ T6131] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 101.923373][ T6131] ? security_sctp_bind_connect+0x89/0xb0 [ 101.929117][ T6131] sctp_sendmsg+0x1519/0x27b0 [ 101.933842][ T6131] ? sctp_getsockopt+0xb60/0xb60 [ 101.938806][ T6131] ? aa_af_perm+0x330/0x330 [ 101.943326][ T6131] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 101.949752][ T6131] ? sock_rps_record_flow+0x19/0x3f0 [ 101.955047][ T6131] ? inet_sendmsg+0xce/0x2a0 [ 101.959634][ T6131] ? inet_send_prepare+0x250/0x250 [ 101.964740][ T6131] ____sys_sendmsg+0x61b/0x980 [ 101.969514][ T6131] ? __asan_memset+0x22/0x40 [ 101.974103][ T6131] ? __sys_sendmsg_sock+0x30/0x30 [ 101.979122][ T6131] ? __import_iovec+0x5f2/0x850 [ 101.983983][ T6131] ? import_iovec+0x73/0xa0 [ 101.988487][ T6131] ___sys_sendmsg+0x2a6/0x360 [ 101.993166][ T6131] ? get_pid_task+0x20/0x1e0 [ 101.997759][ T6131] ? __sys_sendmsg+0x2b0/0x2b0 [ 102.002542][ T6131] ? __lock_acquire+0x7d80/0x7d80 [ 102.007584][ T6131] __se_sys_sendmsg+0x1d0/0x2c0 [ 102.012442][ T6131] ? __x64_sys_sendmsg+0x80/0x80 [ 102.017388][ T6131] ? lockdep_hardirqs_on+0x98/0x150 [ 102.022586][ T6131] do_syscall_64+0x55/0xb0 [ 102.027000][ T6131] ? clear_bhb_loop+0x40/0x90 [ 102.031677][ T6131] ? clear_bhb_loop+0x40/0x90 [ 102.036360][ T6131] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 102.042267][ T6131] RIP: 0033:0x7f5c1079de59 [ 102.046674][ T6131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.066276][ T6131] RSP: 002b:00007f5c11688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.074685][ T6131] RAX: ffffffffffffffda RBX: 00007f5c10a25fa0 RCX: 00007f5c1079de59 [ 102.082661][ T6131] RDX: 00000000000003e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 102.090728][ T6131] RBP: 00007f5c11688090 R08: 0000000000000000 R09: 0000000000000000 [ 102.098695][ T6131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.106659][ T6131] R13: 00007f5c10a26038 R14: 00007f5c10a25fa0 R15: 00007fffd276e9f8 [ 102.114638][ T6131] [ 102.551046][ T6147] netlink: 'syz.0.117': attribute type 10 has an invalid length. [ 102.580966][ T6147] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.117'. [ 102.648279][ T6147] openvswitch: netlink: Flow key attr not present in new flow. [ 102.736654][ T5788] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 102.890615][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.315913][ T6159] syzkaller0: entered promiscuous mode [ 103.322987][ T6159] syzkaller0: entered allmulticast mode [ 103.879654][ T6182] netlink: 'syz.3.130': attribute type 10 has an invalid length. [ 103.901856][ T6182] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.130'. [ 103.911138][ T6182] openvswitch: netlink: Flow key attr not present in new flow. [ 105.502714][ T6196] netlink: 132 bytes leftover after parsing attributes in process `syz.1.134'. [ 105.556005][ T6199] netlink: 'syz.3.135': attribute type 33 has an invalid length. [ 105.598186][ T6199] netlink: 152 bytes leftover after parsing attributes in process `syz.3.135'. [ 106.197197][ T6213] FAULT_INJECTION: forcing a failure. [ 106.197197][ T6213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.217437][ T6213] CPU: 1 PID: 6213 Comm: syz.2.141 Not tainted syzkaller #0 [ 106.224776][ T6213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 106.234848][ T6213] Call Trace: [ 106.238126][ T6213] [ 106.241050][ T6213] dump_stack_lvl+0x18c/0x250 [ 106.245737][ T6213] ? show_regs_print_info+0x20/0x20 [ 106.250935][ T6213] ? load_image+0x420/0x420 [ 106.255444][ T6213] ? __might_fault+0xaa/0x120 [ 106.260116][ T6213] ? __lock_acquire+0x7d80/0x7d80 [ 106.265142][ T6213] should_fail_ex+0x394/0x4c0 [ 106.269823][ T6213] _copy_from_user+0x2f/0xe0 [ 106.274427][ T6213] __sys_bpf+0x23e/0x890 [ 106.278666][ T6213] ? bpf_link_show_fdinfo+0x390/0x390 [ 106.284046][ T6213] ? lock_chain_count+0x20/0x20 [ 106.288902][ T6213] __x64_sys_bpf+0x7c/0x90 [ 106.293314][ T6213] do_syscall_64+0x55/0xb0 [ 106.297727][ T6213] ? clear_bhb_loop+0x40/0x90 [ 106.302394][ T6213] ? clear_bhb_loop+0x40/0x90 [ 106.307065][ T6213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.312959][ T6213] RIP: 0033:0x7f5c1079de59 [ 106.317373][ T6213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.336976][ T6213] RSP: 002b:00007f5c11688028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 106.345386][ T6213] RAX: ffffffffffffffda RBX: 00007f5c10a25fa0 RCX: 00007f5c1079de59 [ 106.353357][ T6213] RDX: 0000000000000020 RSI: 0000200000001200 RDI: 0000000000000001 [ 106.361319][ T6213] RBP: 00007f5c11688090 R08: 0000000000000000 R09: 0000000000000000 [ 106.369371][ T6213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.377343][ T6213] R13: 00007f5c10a26038 R14: 00007f5c10a25fa0 R15: 00007fffd276e9f8 [ 106.385604][ T6213] [ 106.573035][ T6218] netlink: 'syz.3.143': attribute type 10 has an invalid length. [ 106.590717][ T6218] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.143'. [ 106.609396][ T6218] openvswitch: netlink: Flow key attr not present in new flow. [ 106.758475][ T6216] syzkaller0: entered promiscuous mode [ 106.764676][ T6216] syzkaller0: entered allmulticast mode [ 108.938435][ T6261] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 108.961821][ T6261] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.160'. [ 108.971419][ T6261] openvswitch: netlink: Flow key attr not present in new flow. [ 109.637017][ T6270] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 109.723898][ T5779] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 109.731616][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 109.800711][ T6272] netlink: 'syz.3.165': attribute type 3 has an invalid length. [ 109.810486][ T6272] netlink: 132 bytes leftover after parsing attributes in process `syz.3.165'. [ 110.313527][ T6287] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 110.636268][ T6297] netlink: 'syz.2.173': attribute type 10 has an invalid length. [ 110.645659][ T6297] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.173'. [ 110.656325][ T6297] openvswitch: netlink: Flow key attr not present in new flow. [ 110.812250][ T6302] Zero length message leads to an empty skb [ 110.837038][ T6302] netlink: 'syz.3.172': attribute type 10 has an invalid length. [ 110.859052][ T6302] netlink: 152 bytes leftover after parsing attributes in process `syz.3.172'. [ 111.086111][ T5788] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 111.094930][ T5788] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 111.158148][ T6311] netlink: 'syz.1.176': attribute type 3 has an invalid length. [ 111.170107][ T6311] netlink: 132 bytes leftover after parsing attributes in process `syz.1.176'. [ 111.704250][ T6329] syzkaller0: entered promiscuous mode [ 111.711304][ T6329] syzkaller0: entered allmulticast mode [ 111.785980][ T6332] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 111.901990][ T6332] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.183'. [ 111.993130][ T6332] openvswitch: netlink: Flow key attr not present in new flow. [ 112.264648][ T6326] netlink: 'syz.2.181': attribute type 19 has an invalid length. [ 112.330514][ T6326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.181'. [ 112.813309][ T5788] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 112.820849][ T5788] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 113.821379][ T6350] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 113.841568][ T6350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.188'. [ 114.873121][ T6372] netlink: 'syz.0.198': attribute type 3 has an invalid length. [ 114.885660][ T6372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.198'. [ 115.092547][ T6378] FAULT_INJECTION: forcing a failure. [ 115.092547][ T6378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.116820][ T6378] CPU: 1 PID: 6378 Comm: syz.3.199 Not tainted syzkaller #0 [ 115.124154][ T6378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.134223][ T6378] Call Trace: [ 115.137621][ T6378] [ 115.140571][ T6378] dump_stack_lvl+0x18c/0x250 [ 115.145303][ T6378] ? show_regs_print_info+0x20/0x20 [ 115.150524][ T6378] ? load_image+0x420/0x420 [ 115.155045][ T6378] ? __might_fault+0xaa/0x120 [ 115.159740][ T6378] ? __lock_acquire+0x7d80/0x7d80 [ 115.164794][ T6378] should_fail_ex+0x394/0x4c0 [ 115.169499][ T6378] _copy_from_user+0x2f/0xe0 [ 115.174112][ T6378] ip6_tnl_siocdevprivate+0x1d9/0xab0 [ 115.179516][ T6378] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 115.184908][ T6378] ? dev_ioctl+0x83c/0x1140 [ 115.189423][ T6378] ? __lock_acquire+0x7d80/0x7d80 [ 115.194478][ T6378] ? dev_ifsioc+0x957/0xc40 [ 115.199008][ T6378] dev_ioctl+0x84c/0x1140 [ 115.203352][ T6378] sock_ioctl+0x74c/0x7e0 [ 115.207699][ T6378] ? sock_poll+0x3e0/0x3e0 [ 115.212134][ T6378] ? bpf_lsm_file_ioctl+0x9/0x10 [ 115.217082][ T6378] ? security_file_ioctl+0x80/0xa0 [ 115.222207][ T6378] ? sock_poll+0x3e0/0x3e0 [ 115.226632][ T6378] __se_sys_ioctl+0xfd/0x170 [ 115.231235][ T6378] do_syscall_64+0x55/0xb0 [ 115.235693][ T6378] ? clear_bhb_loop+0x40/0x90 [ 115.240391][ T6378] ? clear_bhb_loop+0x40/0x90 [ 115.245082][ T6378] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.251081][ T6378] RIP: 0033:0x7fea9cd9de59 [ 115.255525][ T6378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.275146][ T6378] RSP: 002b:00007fea9dc15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.283580][ T6378] RAX: ffffffffffffffda RBX: 00007fea9d026090 RCX: 00007fea9cd9de59 [ 115.291563][ T6378] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006 [ 115.299549][ T6378] RBP: 00007fea9dc15090 R08: 0000000000000000 R09: 0000000000000000 [ 115.307537][ T6378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.315520][ T6378] R13: 00007fea9d026128 R14: 00007fea9d026090 R15: 00007ffd51a25948 [ 115.323529][ T6378] [ 115.499191][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 115.507028][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 115.567919][ T6382] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 115.587566][ T6382] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.201'. [ 115.624949][ T6382] openvswitch: netlink: Flow key attr not present in new flow. [ 115.874501][ T6382] syzkaller0: entered promiscuous mode [ 115.900138][ T6382] syzkaller0: entered allmulticast mode [ 116.209015][ T6392] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.212'. [ 116.259672][ T6392] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.212'. [ 117.413754][ T6392] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.212'. [ 117.445252][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.453692][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.482148][ T6397] bridge0: entered allmulticast mode [ 117.522112][ T6398] bridge_slave_1: left allmulticast mode [ 117.528083][ T6398] bridge_slave_1: left promiscuous mode [ 117.554429][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.577320][ T6398] bridge_slave_0: left allmulticast mode [ 117.592987][ T6398] bridge_slave_0: left promiscuous mode [ 117.598768][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.716721][ T6395] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.212'. [ 117.977713][ T6411] netlink: 'syz.0.208': attribute type 3 has an invalid length. [ 117.995168][ T6411] netlink: 132 bytes leftover after parsing attributes in process `syz.0.208'. [ 118.077699][ T6414] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.210'. [ 118.094081][ T6414] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.210'. [ 118.125966][ T6414] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.210'. [ 118.147503][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.155245][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.172796][ T6414] bridge0: entered allmulticast mode [ 118.239974][ T6414] bridge_slave_1: left allmulticast mode [ 118.245808][ T6414] bridge_slave_1: left promiscuous mode [ 118.251997][ T6414] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.264658][ T6414] bridge_slave_0: left allmulticast mode [ 118.270477][ T6414] bridge_slave_0: left promiscuous mode [ 118.276709][ T6414] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.655231][ T6427] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 118.685567][ T6427] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.215'. [ 118.713033][ T6427] openvswitch: netlink: Flow key attr not present in new flow. [ 118.889799][ T6427] syzkaller0: entered promiscuous mode [ 118.901708][ T6427] syzkaller0: entered allmulticast mode [ 120.243433][ T6444] netlink: 'syz.1.220': attribute type 4 has an invalid length. [ 120.262352][ T6444] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.220'. [ 120.417945][ T6446] netlink: 'syz.2.221': attribute type 3 has an invalid length. [ 120.419680][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 120.433927][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 120.716903][ T6457] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 120.729414][ T6457] netlink: 'syz.1.225': attribute type 3 has an invalid length. [ 120.755124][ T6457] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 121.416220][ T6465] netlink: 'syz.1.229': attribute type 10 has an invalid length. [ 121.438570][ T6465] __nla_validate_parse: 3 callbacks suppressed [ 121.438588][ T6465] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.229'. [ 121.475732][ T6465] openvswitch: netlink: Flow key attr not present in new flow. [ 121.968132][ T6471] netlink: 144 bytes leftover after parsing attributes in process `syz.2.230'. [ 122.300664][ T6465] syzkaller0: entered promiscuous mode [ 122.321597][ T6465] syzkaller0: entered allmulticast mode [ 123.750473][ T6486] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 123.903396][ T5788] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 123.910891][ T5788] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 123.944833][ T6494] netlink: 'syz.1.235': attribute type 3 has an invalid length. [ 123.953148][ T6494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.235'. [ 123.975308][ T6492] netlink: 'syz.0.236': attribute type 10 has an invalid length. [ 123.984336][ T6492] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.236'. [ 123.994611][ T6492] openvswitch: netlink: Flow key attr not present in new flow. [ 124.174874][ T6501] netlink: 188 bytes leftover after parsing attributes in process `syz.0.240'. [ 124.525829][ T6507] syz.0.243 uses obsolete (PF_INET,SOCK_PACKET) [ 124.542489][ T6507] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 124.552039][ T6507] netlink: 55 bytes leftover after parsing attributes in process `syz.0.243'. [ 124.555615][ T6509] netlink: 'syz.2.244': attribute type 10 has an invalid length. [ 124.587314][ T6509] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.244'. [ 124.607879][ T6509] openvswitch: netlink: Flow key attr not present in new flow. [ 125.480829][ T6511] syzkaller0: entered promiscuous mode [ 125.486794][ T6511] syzkaller0: entered allmulticast mode [ 125.596124][ T6507] syz.0.243 (6507) used greatest stack depth: 20136 bytes left [ 125.846906][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 125.855722][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 125.973911][ T2879] wlan1: Trigger new scan to find an IBSS to join [ 127.693304][ T6547] netlink: 'syz.2.253': attribute type 3 has an invalid length. [ 127.701017][ T6547] netlink: 132 bytes leftover after parsing attributes in process `syz.2.253'. [ 127.827624][ T6545] syzkaller0: entered promiscuous mode [ 127.851612][ T6545] syzkaller0: entered allmulticast mode [ 128.090844][ T5788] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 128.098925][ T5788] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 128.400551][ T6567] netlink: 'syz.1.260': attribute type 10 has an invalid length. [ 128.414747][ T6567] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.260'. [ 128.446252][ T6567] openvswitch: netlink: Flow key attr not present in new flow. [ 130.270537][ T6591] netlink: 'syz.0.274': attribute type 10 has an invalid length. [ 130.291694][ T6591] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.274'. [ 130.300977][ T6591] openvswitch: netlink: Flow key attr not present in new flow. [ 130.385460][ T6595] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 130.410135][ T6595] netlink: 55 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.816265][ T5788] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 130.825019][ T5788] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 130.924333][ T4344] wlan1: Trigger new scan to find an IBSS to join [ 130.969498][ T6591] syzkaller0: entered promiscuous mode [ 130.975241][ T6591] syzkaller0: entered allmulticast mode [ 131.520095][ T6611] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 131.536921][ T6611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.269'. [ 131.894217][ T2879] wlan1: Creating new IBSS network, BSSID de:38:9d:56:3e:d5 [ 132.928648][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937011][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.788128][ T5779] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 133.795923][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 133.814456][ T6630] netlink: 'syz.3.277': attribute type 2 has an invalid length. [ 133.842674][ T6630] netlink: 132 bytes leftover after parsing attributes in process `syz.3.277'. [ 133.876138][ T6634] netlink: 'syz.2.279': attribute type 3 has an invalid length. [ 133.884336][ T6634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.279'. [ 133.954145][ T6636] netlink: 'syz.1.280': attribute type 21 has an invalid length. [ 133.962587][ T6636] netlink: 176 bytes leftover after parsing attributes in process `syz.1.280'. [ 134.186693][ T6643] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 134.211720][ T6643] netlink: 55 bytes leftover after parsing attributes in process `syz.3.284'. [ 135.041250][ T6645] syzkaller0: entered promiscuous mode [ 135.112108][ T6645] syzkaller0: entered allmulticast mode [ 135.554791][ T5779] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 135.562759][ T5779] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 137.758849][ T6688] netlink: 'syz.2.297': attribute type 3 has an invalid length. [ 137.770036][ T6688] netlink: 132 bytes leftover after parsing attributes in process `syz.2.297'. [ 137.798968][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 137.806676][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 138.193855][ T6694] syzkaller0: entered promiscuous mode [ 138.205412][ T6694] syzkaller0: entered allmulticast mode [ 138.361022][ T6698] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 138.385765][ T6698] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.301'. [ 138.598310][ T6707] FAULT_INJECTION: forcing a failure. [ 138.598310][ T6707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.616246][ T6707] CPU: 1 PID: 6707 Comm: syz.1.304 Not tainted syzkaller #0 [ 138.623602][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 138.633679][ T6707] Call Trace: [ 138.636957][ T6707] [ 138.639908][ T6707] dump_stack_lvl+0x18c/0x250 [ 138.644622][ T6707] ? show_regs_print_info+0x20/0x20 [ 138.649849][ T6707] ? load_image+0x420/0x420 [ 138.654357][ T6707] ? __might_fault+0xaa/0x120 [ 138.659039][ T6707] ? __lock_acquire+0x7d80/0x7d80 [ 138.664060][ T6707] ? __virt_addr_valid+0x10c/0x380 [ 138.669177][ T6707] should_fail_ex+0x394/0x4c0 [ 138.673864][ T6707] _copy_from_user+0x2f/0xe0 [ 138.678472][ T6707] generic_map_update_batch+0x58c/0x800 [ 138.684033][ T6707] ? rcu_read_unlock+0xa0/0xa0 [ 138.688804][ T6707] ? __fdget+0x180/0x210 [ 138.693044][ T6707] ? rcu_read_unlock+0xa0/0xa0 [ 138.697826][ T6707] bpf_map_do_batch+0x3f2/0x600 [ 138.702677][ T6707] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 138.709036][ T6707] __sys_bpf+0x381/0x890 [ 138.713304][ T6707] ? bpf_link_show_fdinfo+0x390/0x390 [ 138.718710][ T6707] ? lock_chain_count+0x20/0x20 [ 138.723610][ T6707] __x64_sys_bpf+0x7c/0x90 [ 138.728053][ T6707] do_syscall_64+0x55/0xb0 [ 138.732471][ T6707] ? clear_bhb_loop+0x40/0x90 [ 138.737168][ T6707] ? clear_bhb_loop+0x40/0x90 [ 138.741875][ T6707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.747791][ T6707] RIP: 0033:0x7f2a1ef9de59 [ 138.752205][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.771830][ T6707] RSP: 002b:00007f2a1fe08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.780268][ T6707] RAX: ffffffffffffffda RBX: 00007f2a1f225fa0 RCX: 00007f2a1ef9de59 [ 138.788243][ T6707] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 138.796213][ T6707] RBP: 00007f2a1fe08090 R08: 0000000000000000 R09: 0000000000000000 [ 138.804184][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.812155][ T6707] R13: 00007f2a1f226038 R14: 00007f2a1f225fa0 R15: 00007fff81f20c88 [ 138.820155][ T6707] [ 139.632819][ T6712] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 139.996427][ T6712] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 140.025288][ T6711] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 140.146148][ T6717] netlink: 'syz.3.308': attribute type 3 has an invalid length. [ 140.157847][ T6717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.308'. [ 140.176050][ T5779] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 140.183670][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 140.226979][ T6719] netlink: 'syz.2.309': attribute type 10 has an invalid length. [ 140.235768][ T6719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.309'. [ 140.247235][ T6719] batman_adv: batadv0: Adding interface: veth0_vlan [ 140.254009][ T6719] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.280577][ T6719] batman_adv: batadv0: Interface activated: veth0_vlan [ 140.808035][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 140.837954][ T6733] netlink: 'syz.3.313': attribute type 10 has an invalid length. [ 141.198160][ T6733] team0: Port device wlan1 added [ 141.215685][ T6735] netlink: 48 bytes leftover after parsing attributes in process `syz.2.314'. [ 141.225212][ T6744] FAULT_INJECTION: forcing a failure. [ 141.225212][ T6744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.250949][ T6744] CPU: 0 PID: 6744 Comm: syz.0.316 Not tainted syzkaller #0 [ 141.258276][ T6744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 141.268329][ T6744] Call Trace: [ 141.271602][ T6744] [ 141.274526][ T6744] dump_stack_lvl+0x18c/0x250 [ 141.279212][ T6744] ? show_regs_print_info+0x20/0x20 [ 141.284409][ T6744] ? load_image+0x420/0x420 [ 141.288907][ T6744] ? __might_fault+0xaa/0x120 [ 141.293576][ T6744] ? __lock_acquire+0x7d80/0x7d80 [ 141.298599][ T6744] ? __virt_addr_valid+0x10c/0x380 [ 141.303713][ T6744] should_fail_ex+0x394/0x4c0 [ 141.308395][ T6744] _copy_to_user+0x2f/0xa0 [ 141.312807][ T6744] bpf_test_finish+0x206/0x650 [ 141.317565][ T6744] ? bpf_test_run+0x174/0x870 [ 141.322242][ T6744] ? convert_skb_to___skb+0x420/0x420 [ 141.327616][ T6744] bpf_prog_test_run_skb+0x1135/0x18f0 [ 141.333089][ T6744] ? cpu_online+0x60/0x60 [ 141.337409][ T6744] bpf_prog_test_run+0x31f/0x390 [ 141.342347][ T6744] __sys_bpf+0x49d/0x890 [ 141.346589][ T6744] ? bpf_link_show_fdinfo+0x390/0x390 [ 141.351964][ T6744] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 141.358124][ T6744] __x64_sys_bpf+0x7c/0x90 [ 141.362534][ T6744] do_syscall_64+0x55/0xb0 [ 141.366952][ T6744] ? clear_bhb_loop+0x40/0x90 [ 141.371621][ T6744] ? clear_bhb_loop+0x40/0x90 [ 141.376289][ T6744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.382176][ T6744] RIP: 0033:0x7fd996d9de59 [ 141.386583][ T6744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.406203][ T6744] RSP: 002b:00007fd997b9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 141.414624][ T6744] RAX: ffffffffffffffda RBX: 00007fd997025fa0 RCX: 00007fd996d9de59 [ 141.422594][ T6744] RDX: 0000000000000024 RSI: 0000200000000640 RDI: 000000000000000a [ 141.430566][ T6744] RBP: 00007fd997b9b090 R08: 0000000000000000 R09: 0000000000000000 [ 141.438534][ T6744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.446500][ T6744] R13: 00007fd997026038 R14: 00007fd997025fa0 R15: 00007ffdf86256e8 [ 141.454485][ T6744] [ 141.525098][ T6733] syz.3.313 (6733) used greatest stack depth: 19224 bytes left [ 141.855851][ T6746] syzkaller0: entered promiscuous mode [ 141.870343][ T6746] syzkaller0: entered allmulticast mode [ 141.952907][ T5779] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 141.960632][ T5779] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 142.259131][ T6757] netlink: 'syz.1.321': attribute type 3 has an invalid length. [ 142.267403][ T6757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.321'. [ 143.331030][ T5779] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 143.341744][ T5779] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 145.311214][ T6769] netlink: 48 bytes leftover after parsing attributes in process `syz.2.326'. [ 145.441609][ T6783] netlink: 'syz.2.331': attribute type 3 has an invalid length. [ 145.452697][ T6783] netlink: 132 bytes leftover after parsing attributes in process `syz.2.331'. [ 146.028917][ T6797] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 146.227517][ T6796] syzkaller0: entered promiscuous mode [ 146.261837][ T6796] syzkaller0: entered allmulticast mode [ 146.287758][ T6797] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 146.516836][ T6804] netlink: 'syz.1.334': attribute type 29 has an invalid length. [ 146.544830][ T6807] Illegal XDP return value 4294967294 on prog (id 373) dev N/A, expect packet loss! [ 147.217412][ T5788] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 147.225164][ T5788] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 148.287910][ T6811] netlink: 48 bytes leftover after parsing attributes in process `syz.1.339'. [ 148.365329][ T6825] netlink: 'syz.1.344': attribute type 3 has an invalid length. [ 148.382336][ T6825] netlink: 132 bytes leftover after parsing attributes in process `syz.1.344'. [ 148.448917][ T6827] netlink: 'syz.2.345': attribute type 29 has an invalid length. [ 148.457583][ T6827] netlink: 'syz.2.345': attribute type 29 has an invalid length. [ 148.474355][ T6827] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 148.502313][ T6827] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 148.518158][ T6829] netlink: 'syz.0.346': attribute type 2 has an invalid length. [ 148.948607][ T6840] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 148.974413][ T6840] netlink: 'syz.2.349': attribute type 29 has an invalid length. [ 149.356769][ T5788] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 149.366161][ T5788] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 149.443452][ T6851] netlink: 48 bytes leftover after parsing attributes in process `syz.2.354'. [ 149.532634][ T6855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'. [ 149.567125][ T6853] syzkaller0: entered promiscuous mode [ 149.576300][ T6853] syzkaller0: entered allmulticast mode [ 149.893276][ T6862] FAULT_INJECTION: forcing a failure. [ 149.893276][ T6862] name failslab, interval 1, probability 0, space 0, times 0 [ 149.907029][ T6862] CPU: 1 PID: 6862 Comm: syz.2.360 Not tainted syzkaller #0 [ 149.914346][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 149.924435][ T6862] Call Trace: [ 149.927726][ T6862] [ 149.930654][ T6862] dump_stack_lvl+0x18c/0x250 [ 149.935332][ T6862] ? sctp_sendmsg+0x1519/0x27b0 [ 149.940178][ T6862] ? ___sys_sendmsg+0x2a6/0x360 [ 149.945027][ T6862] ? show_regs_print_info+0x20/0x20 [ 149.950242][ T6862] ? load_image+0x420/0x420 [ 149.954762][ T6862] should_fail_ex+0x394/0x4c0 [ 149.959444][ T6862] should_failslab+0x9/0x20 [ 149.963961][ T6862] slab_pre_alloc_hook+0x59/0x300 [ 149.969015][ T6862] ? sctp_add_bind_addr+0x8c/0x360 [ 149.974136][ T6862] __kmem_cache_alloc_node+0x53/0x250 [ 149.979526][ T6862] ? sctp_add_bind_addr+0x8c/0x360 [ 149.984639][ T6862] kmalloc_trace+0x2a/0xe0 [ 149.989063][ T6862] sctp_add_bind_addr+0x8c/0x360 [ 149.994011][ T6862] sctp_copy_local_addr_list+0x31b/0x4e0 [ 149.999654][ T6862] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 150.005389][ T6862] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 150.011478][ T6862] ? sctp_v4_is_any+0x35/0x60 [ 150.016163][ T6862] ? sctp_copy_one_addr+0x8c/0x350 [ 150.021287][ T6862] sctp_bind_addr_copy+0xb3/0x3c0 [ 150.026314][ T6862] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 150.032653][ T6862] sctp_connect_new_asoc+0x2f9/0x6a0 [ 150.037946][ T6862] ? __sctp_connect+0xd80/0xd80 [ 150.042795][ T6862] ? __local_bh_enable_ip+0x13a/0x1c0 [ 150.048186][ T6862] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 150.053734][ T6862] ? security_sctp_bind_connect+0x89/0xb0 [ 150.059466][ T6862] sctp_sendmsg+0x1519/0x27b0 [ 150.064165][ T6862] ? sctp_getsockopt+0xb60/0xb60 [ 150.069114][ T6862] ? aa_af_perm+0x330/0x330 [ 150.073632][ T6862] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 150.080055][ T6862] ? sock_rps_record_flow+0x19/0x3f0 [ 150.085349][ T6862] ? inet_sendmsg+0xce/0x2a0 [ 150.089943][ T6862] ? inet_send_prepare+0x250/0x250 [ 150.095061][ T6862] ____sys_sendmsg+0x61b/0x980 [ 150.099841][ T6862] ? __asan_memset+0x22/0x40 [ 150.104443][ T6862] ? __sys_sendmsg_sock+0x30/0x30 [ 150.109646][ T6862] ? __import_iovec+0x5f2/0x850 [ 150.114516][ T6862] ? import_iovec+0x73/0xa0 [ 150.119030][ T6862] ___sys_sendmsg+0x2a6/0x360 [ 150.123724][ T6862] ? __sys_sendmsg+0x2b0/0x2b0 [ 150.128527][ T6862] ? __lock_acquire+0x7d80/0x7d80 [ 150.133596][ T6862] __se_sys_sendmsg+0x1d0/0x2c0 [ 150.138456][ T6862] ? __x64_sys_sendmsg+0x80/0x80 [ 150.143424][ T6862] ? lockdep_hardirqs_on+0x98/0x150 [ 150.148629][ T6862] do_syscall_64+0x55/0xb0 [ 150.153053][ T6862] ? clear_bhb_loop+0x40/0x90 [ 150.157726][ T6862] ? clear_bhb_loop+0x40/0x90 [ 150.162405][ T6862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 150.168305][ T6862] RIP: 0033:0x7f5c1079de59 [ 150.172724][ T6862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.192335][ T6862] RSP: 002b:00007f5c11688028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.200752][ T6862] RAX: ffffffffffffffda RBX: 00007f5c10a25fa0 RCX: 00007f5c1079de59 [ 150.208811][ T6862] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000004 [ 150.216874][ T6862] RBP: 00007f5c11688090 R08: 0000000000000000 R09: 0000000000000000 [ 150.224852][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.232820][ T6862] R13: 00007f5c10a26038 R14: 00007f5c10a25fa0 R15: 00007fffd276e9f8 [ 150.240819][ T6862] [ 150.983168][ T5788] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 150.990693][ T5788] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 151.088559][ T6881] validate_nla: 2 callbacks suppressed [ 151.088575][ T6881] netlink: 'syz.2.367': attribute type 3 has an invalid length. [ 151.103151][ T6881] netlink: 132 bytes leftover after parsing attributes in process `syz.2.367'. [ 152.197932][ T6879] netlink: 48 bytes leftover after parsing attributes in process `syz.3.366'. [ 152.406787][ T6895] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.372'. [ 152.671852][ T6903] netlink: 'syz.3.376': attribute type 3 has an invalid length. [ 152.720970][ T6903] netlink: 132 bytes leftover after parsing attributes in process `syz.3.376'. [ 161.988674][ T4131] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.166546][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 169.186672][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 169.194725][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 169.202848][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 169.210591][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 169.218066][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 169.312428][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.321652][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.329673][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.342646][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.350439][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.358086][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.506805][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 169.515800][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 169.524483][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 169.532779][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 169.540463][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 169.548234][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 170.016080][ T6919] chnl_net:caif_netlink_parms(): no params data found [ 170.227976][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 170.288398][ T6926] chnl_net:caif_netlink_parms(): no params data found [ 170.363250][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.370409][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.392914][ T6919] bridge_slave_0: entered allmulticast mode [ 170.400302][ T6919] bridge_slave_0: entered promiscuous mode [ 170.464976][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.481123][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.489405][ T6919] bridge_slave_1: entered allmulticast mode [ 170.509116][ T6919] bridge_slave_1: entered promiscuous mode [ 170.637034][ T6919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.691407][ T6919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.725202][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.742173][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.749417][ T6921] bridge_slave_0: entered allmulticast mode [ 170.765960][ T6921] bridge_slave_0: entered promiscuous mode [ 170.794975][ T6926] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.810122][ T6926] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.818126][ T6926] bridge_slave_0: entered allmulticast mode [ 170.833866][ T6926] bridge_slave_0: entered promiscuous mode [ 170.852229][ T6926] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.859365][ T6926] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.874856][ T6926] bridge_slave_1: entered allmulticast mode [ 170.887099][ T6926] bridge_slave_1: entered promiscuous mode [ 170.897933][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.909795][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.920985][ T6921] bridge_slave_1: entered allmulticast mode [ 170.928869][ T6921] bridge_slave_1: entered promiscuous mode [ 171.241906][ T5788] Bluetooth: hci4: command tx timeout [ 171.403435][ T5788] Bluetooth: hci5: command tx timeout [ 171.641884][ T5788] Bluetooth: hci6: command tx timeout [ 173.322825][ T5788] Bluetooth: hci4: command tx timeout [ 173.481676][ T5788] Bluetooth: hci5: command tx timeout [ 173.721912][ T5788] Bluetooth: hci6: command tx timeout [ 175.421508][ T5788] Bluetooth: hci4: command tx timeout [ 175.571951][ T5788] Bluetooth: hci5: command tx timeout [ 175.620649][ T5779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 175.634107][ T5779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 175.643013][ T5779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 175.651201][ T5779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.667134][ T5779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 175.674745][ T5779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 175.801769][ T5779] Bluetooth: hci6: command tx timeout [ 177.491850][ T5779] Bluetooth: hci4: command tx timeout [ 177.641878][ T5779] Bluetooth: hci5: command tx timeout [ 177.721904][ T5779] Bluetooth: hci7: command tx timeout [ 177.881751][ T5779] Bluetooth: hci6: command tx timeout [ 179.801669][ T5779] Bluetooth: hci7: command tx timeout [ 180.453390][ T6919] team0: Port device team_slave_0 added [ 180.517012][ T6926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.564744][ T6919] team0: Port device team_slave_1 added [ 180.574787][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.601897][ T6926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.642304][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.803990][ T6926] team0: Port device team_slave_0 added [ 180.835995][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.850809][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.886193][ T6919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.905077][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.920186][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.961899][ T6919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.996988][ T6926] team0: Port device team_slave_1 added [ 181.042292][ T6921] team0: Port device team_slave_0 added [ 181.124425][ T6921] team0: Port device team_slave_1 added [ 181.891875][ T5779] Bluetooth: hci7: command tx timeout [ 183.961842][ T5779] Bluetooth: hci7: command tx timeout [ 194.374486][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.380837][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.566699][ T5779] Bluetooth: hci3: command 0x0406 tx timeout [ 210.319774][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.212102][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 220.218170][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 220.224279][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 255.807370][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821528][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 285.371448][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 285.378192][ C1] rcu: 1-....: (10263 ticks this GP) idle=7864/1/0x4000000000000000 softirq=17660/17662 fqs=4794 [ 285.389770][ C1] rcu: hardirqs softirqs csw/system [ 285.396189][ C1] rcu: number: 1472470 2 0 [ 285.402606][ C1] rcu: cputime: 16921 35557 36 ==> 52480(ms) [ 285.410462][ C1] rcu: (t=10500 jiffies g=20669 q=566 ncpus=2) [ 285.416715][ C1] CPU: 1 PID: 6900 Comm: syz.0.374 Not tainted syzkaller #0 [ 285.424091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 285.434148][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 285.440645][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 9b ed c6 f6 65 8b 05 6c 3c 6e 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 285.460241][ C1] RSP: 0018:ffffc900001f0380 EFLAGS: 00000206 [ 285.466304][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: be6bb2fcd39a8500 [ 285.474260][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: 0000000000000001 [ 285.482213][ C1] RBP: ffffc900001f0410 R08: ffffffff911e75f7 R09: 1ffffffff223cebe [ 285.490165][ C1] R10: dffffc0000000000 R11: fffffbfff223cebf R12: dffffc0000000000 [ 285.498136][ C1] R13: ffff88805d8506b8 R14: ffff88805d8506b8 R15: 1ffff9200003e070 [ 285.506205][ C1] FS: 00007fd997b9b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 285.515122][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.521694][ C1] CR2: 0000563281f084b0 CR3: 00000000247b7000 CR4: 00000000003506e0 [ 285.529677][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.537646][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 285.545609][ C1] Call Trace: [ 285.548877][ C1] [ 285.551707][ C1] ? _raw_spin_unlock+0x40/0x40 [ 285.556553][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 285.562461][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 285.568350][ C1] ? _raw_spin_unlock+0x40/0x40 [ 285.573202][ C1] wiphy_work_queue+0x133/0x180 [ 285.578047][ C1] ieee80211_rx_h_mgmt+0x4f0/0x6e0 [ 285.583149][ C1] ieee80211_rx_handlers+0x65b6/0xb450 [ 285.588635][ C1] ? drv_event_callback+0x250/0x250 [ 285.593827][ C1] ? __lock_acquire+0x1262/0x7d80 [ 285.598854][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 285.604049][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 285.609233][ C1] ? sched_clock+0x3f/0x60 [ 285.613642][ C1] ? sched_clock_cpu+0x75/0x430 [ 285.618486][ C1] ieee80211_prepare_and_rx_handle+0x27de/0x6080 [ 285.624815][ C1] ? ieee80211_rx_8023+0x1220/0x1220 [ 285.630092][ C1] ? sta_info_get_bss+0x50/0x320 [ 285.635028][ C1] ? sta_info_get_bss+0x50/0x320 [ 285.639948][ C1] ? sta_info_get_bss+0x50/0x320 [ 285.644895][ C1] ? sta_info_get_bss+0x309/0x320 [ 285.649929][ C1] ? ieee80211_rx_data_set_sta+0x228/0x3e0 [ 285.655742][ C1] ieee80211_rx_list+0x28d4/0x3240 [ 285.660857][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 285.667005][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 285.672188][ C1] ? read_lock_is_recursive+0x20/0x20 [ 285.677553][ C1] ? ieee80211_rx_napi+0xd2/0x3c0 [ 285.682564][ C1] ieee80211_rx_napi+0x1ae/0x3c0 [ 285.687514][ C1] ? ieee80211_rx_list+0x3240/0x3240 [ 285.692785][ C1] ? skb_dequeue+0x124/0x160 [ 285.697365][ C1] ieee80211_handle_queued_frames+0x105/0x190 [ 285.703420][ C1] ? ieee80211_reconfig_filter+0x20/0x20 [ 285.709030][ C1] tasklet_action_common+0x2d4/0x460 [ 285.714328][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.720490][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 285.726025][ C1] handle_softirqs+0x27d/0x820 [ 285.730769][ C1] ? read_tsc+0x9/0x20 [ 285.734826][ C1] ? ktime_get+0x24b/0x280 [ 285.739229][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 285.743973][ C1] ? do_softirq+0x1a0/0x1a0 [ 285.748453][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 285.753633][ C1] __irq_exit_rcu+0xd3/0x190 [ 285.758204][ C1] ? irq_exit_rcu+0x20/0x20 [ 285.762693][ C1] irq_exit_rcu+0x9/0x20 [ 285.766912][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 285.772525][ C1] [ 285.775437][ C1] [ 285.778353][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.784316][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 285.790103][ C1] Code: 2e 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 43 32 38 09 e8 8e 0a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 285.809778][ C1] RSP: 0018:ffffc9000e277600 EFLAGS: 00000286 [ 285.815827][ C1] RAX: be6bb2fcd39a8500 RBX: 0000000000000000 RCX: be6bb2fcd39a8500 [ 285.823780][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 285.831732][ C1] RBP: ffffc9000e277650 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 285.839683][ C1] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: ffff8880299a5a00 [ 285.847635][ C1] R13: 1ffff110171e79a9 R14: dffffc0000000000 R15: ffff8880b8f3cd48 [ 285.855602][ C1] __schedule+0x15b6/0x4660 [ 285.860100][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 285.867287][ C1] ? lock_chain_count+0x20/0x20 [ 285.872120][ C1] ? asan.module_dtor+0x20/0x20 [ 285.876950][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 285.882137][ C1] preempt_schedule_irq+0xbf/0x150 [ 285.887313][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 285.893110][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 285.898900][ C1] irqentry_exit+0x67/0x70 [ 285.903300][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 285.909267][ C1] RIP: 0010:preempt_schedule_common+0x18/0xc0 [ 285.915326][ C1] Code: 00 00 eb d0 e8 49 b3 f7 ff 66 0f 1f 84 00 00 00 00 00 41 57 41 56 53 49 bf 00 00 00 00 00 fc ff df eb 0d 48 f7 03 08 00 00 00 <0f> 84 99 00 00 00 65 ff 05 23 a4 6f 75 65 8b 05 1c a4 6f 75 25 ff [ 285.934912][ C1] RSP: 0018:ffffc9000e2779e0 EFLAGS: 00000246 [ 285.940961][ C1] RAX: 1ffff11005334b40 RBX: ffff8880299a5a00 RCX: ffffffff815d4953 [ 285.948917][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffff88807fab0980 [ 285.956868][ C1] RBP: ffffc9000e277a78 R08: ffff88807fab0983 R09: 1ffff1100ff56130 [ 285.964819][ C1] R10: dffffc0000000000 R11: ffffed100ff56131 R12: 0000000000000000 [ 285.972772][ C1] R13: dffffc0000000000 R14: ffff8880299a6ec8 R15: dffffc0000000000 [ 285.980760][ C1] ? finish_task_switch+0x323/0x8f0 [ 285.985962][ C1] preempt_schedule+0xc0/0xd0 [ 285.990629][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 285.996249][ C1] preempt_schedule_thunk+0x1a/0x30 [ 286.001436][ C1] ? smp_call_function_single+0x488/0x5a0 [ 286.007139][ C1] smp_call_function_single+0x48d/0x5a0 [ 286.012671][ C1] ? event_function+0x300/0x300 [ 286.017527][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 286.023774][ C1] ? event_function+0x300/0x300 [ 286.028631][ C1] perf_install_in_context+0x5bb/0x920 [ 286.034085][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 286.039185][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 286.045150][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 286.050345][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 286.055528][ C1] ? perf_event__header_size+0x165/0x220 [ 286.061151][ C1] __se_sys_perf_event_open+0x1841/0x1c60 [ 286.066851][ C1] ? bpf_prog_test_run+0x28e/0x390 [ 286.071950][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 286.077572][ C1] ? lock_chain_count+0x20/0x20 [ 286.082409][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 286.087584][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 286.093202][ C1] do_syscall_64+0x55/0xb0 [ 286.097602][ C1] ? clear_bhb_loop+0x40/0x90 [ 286.102260][ C1] ? clear_bhb_loop+0x40/0x90 [ 286.106941][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.112836][ C1] RIP: 0033:0x7fd996d9de59 [ 286.117242][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.136847][ C1] RSP: 002b:00007fd997b9b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 286.145253][ C1] RAX: ffffffffffffffda RBX: 00007fd997025fa0 RCX: 00007fd996d9de59 [ 286.153208][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 286.161162][ C1] RBP: 00007fd996e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 286.169112][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 286.177064][ C1] R13: 00007fd997026038 R14: 00007fd997025fa0 R15: 00007ffdf86256e8 [ 286.185028][ C1] [ 293.740247][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 293.747652][ T5789] Bluetooth: hci5: command 0x0406 tx timeout [ 293.754455][ T5789] Bluetooth: hci6: command 0x0406 tx timeout